Back to Home
Knuckles-Team icon

archivebox-api

Verified Safe

by Knuckles-Team

Overview

Provides an AI-agent-friendly Model Context Protocol (MCP) server and Python wrapper for interacting with an ArchiveBox web archiving instance, enabling programmatic access and automation.

Installation

Run Command
docker run -d --name archivebox-mcp -p 8004:8004 -e HOST=0.0.0.0 -e PORT=8004 -e TRANSPORT=http -e AUTH_TYPE=none -e EUNOMIA_TYPE=none -e ARCHIVEBOX_URL=https://yourinstance.archivebox.com -e ARCHIVEBOX_USERNAME=user -e ARCHIVEBOX_PASSWORD=pass -e ARCHIVEBOX_TOKEN=token -e ARCHIVEBOX_API_KEY=api_key -e ARCHIVEBOX_VERIFY=False docker.io/knucklessg1/archivebox-api:latest

Environment Variables

  • HOST
  • PORT
  • TRANSPORT
  • ARCHIVEBOX_URL
  • ARCHIVEBOX_USERNAME
  • ARCHIVEBOX_PASSWORD
  • ARCHIVEBOX_API_KEY
  • ARCHIVEBOX_BASE_URL
  • ARCHIVEBOX_VERIFY
  • MCP_URL
  • MCP_CONFIG
  • SKILLS_DIRECTORY
  • PROVIDER
  • OPENAI_BASE_URL
  • OPENAI_API_KEY
  • MODEL_ID
  • DEBUG
  • ENABLE_WEB_UI
  • ANTHROPIC_API_KEY
  • GEMINI_API_KEY
  • GOOGLE_API_KEY
  • HF_TOKEN
  • AUDIENCE
  • DELEGATED_SCOPES
  • ENABLE_DELEGATION
  • OIDC_CLIENT_ID
  • OIDC_CLIENT_SECRET
  • OIDC_CONFIG_URL
  • FASTMCP_SERVER_AUTH_JWT_JWKS_URI
  • FASTMCP_SERVER_AUTH_JWT_ISSUER
  • FASTMCP_SERVER_AUTH_JWT_AUDIENCE
  • FASTMCP_SERVER_AUTH_JWT_ALGORITHM
  • FASTMCP_SERVER_AUTH_JWT_PUBLIC_KEY
  • FASTMCP_SERVER_AUTH_JWT_REQUIRED_SCOPES
  • OPENAPI_USERNAME
  • OPENAPI_PASSWORD
  • OPENAPI_CLIENT_ID
  • OPENAPI_CLIENT_SECRET

Security Notes

The project uses `pickle` for model serialization, which is a known vulnerability if untrusted data is deserialized (e.g., if an attacker can control the file path in `load_model`). The `ARCHIVEBOX_VERIFY` environment variable can be set to `False`, disabling SSL certificate validation and exposing the system to Man-in-the-Middle attacks. Default `admin/admin` credentials in `compose.yml` are weak and must be changed. The multiple authentication and authorization mechanisms (JWT, OAuth, OIDC, Eunomia) are powerful but add significant complexity, increasing the risk of misconfiguration.

Similar Servers

Stats

Interest Score30
Security Score7
Cost ClassMedium
Avg Tokens400
Stars1
Forks1
Last Update2026-01-19

Tags

web archivingAI agentMCP serverPython APIautomationfastapi